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In the Claims: 

Claims 1-51 were pending at the time of the Office Action. 

Claims 1-4, 7-10, 12, 13, 16-21, 23, 24, 26-28, 31-33, 37, 38, 40-42, 45-48 
and 51 are rejected. 

Claims 5, 6, 11, 14, 15, 22, 25, 29, 30, 34-36, 39, 43, 44, 49, and 50 are 
objected to. 

Please cancel claims 1-4, 7-10, 19-21, 26-28, 31-33, 37, 38, 40-42, and 45- 
48 without prejudice. 

Please amend claims 5, 11, 12, 14-18, 22-25, 29, 30, 34-36, 39, 43, 44, 49, 
50, and 51 as indicated below. 

Accordingly, claims 5-6, 11-18, 22-25, 29-30, 34-36, 39, 43-44, and 49-51 
remain pending as shown in the following complete listing of claims: 

Listing of Claims: 

Claims 1-4. (Canceled) 

5. (Currently amended) An Internet protocol (IP) filter, 
comprising processor-executable instructions that, when executed on a processor, 
perform the following steps: 

monitoring Internet protocol data packets transmitted from one or more 
clients to a server; 

obtaining a network address from an IP data packet transmitted by a client; 
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processing IP data packets from the client if a Network address that is 
uniquely associated with the client is stored in a client table; 

Th e Int e rn e t protocol filt e r as r e cited in claim 1, furth e r comprising 
processor e x e cutabl e instructions that, wh e n e x e cut e d on a proc e ssor, p e rform th e 
following st e ps: 

if the first Network address is not stored in the client table, retrieving a 
client limit value from a client limit field, the client limit value indicating a 
maximum number of unique clients for which IP data packets can be processed; 

if the number of Network addresses in the client table is greater than or 
equal to the client limit value, transmitting a signal to each Network address listed 
in the client table; and 

if a client at a second Network addresses does not respond to the signal, 
removing the second Network address from the client table, inserting the first 
Network address into the client table and processing IP data packets from the first 
client. 

6. (Original) The Internet protocol filter as recited in claim 5, 
further comprising processor-executable instructions that, when executed on a 
processor, perform the following steps: 

removing the second Network address from the client table; and 

inserting the first Network address into the client table. 

Claims 7-10. (Canceled) 

1 1 . (Currently amended) A method, comprising: 
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detecting when a current client attempts to establish a connection with a 

server; 

determining a unique client identifier that is associated with the current 

client; 

determining if a total number of previous clients having access to the server 
is less than a client limit; 

determining if the current client has previously been allowed to access the 

server; 

providing access to the server if the total number of previous clients having 
access to the server is less than a client limit; 

providing access to the server if the total number of previous clients is 
greater than or equal to the client limit and if the current client has previously been 
allowed to access the server; and 

storing the unique client identifier associated with the current client in 
memory if access is provided to the current client; 

Th e m e thod as r e cit e d in claim 7, wherein the determining if the current 
client has previously been allowed to access the server further comprises: 

transmitting a signal to each previous client that has been allowed to 
access the server; and 

determining that the current client has previously been allowed to 
access the server if at least one of the previous clients fails to acknowledge the 
signal. 

12. (Currently amended) The method as recited in claim JJ_[[7]] ? 
further comprising: 
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pre-configuring the client limit; and 
storing the client limit in memory. 

13. (Original) The method as recited in claim 12, wherein the client 
limit has a pre-defined maximum to which it may be configured. 

14. (Currently amended) A method, comprising: 

detecting when a current client attempts to establish a connection with a 

server; 

determining a unique client identifier that is associated with the current 

client; 

determining if a total number of previous clients having access to the server 
is less than a client limit; 

determining if the current client has previously been allowed to access the 

server; 

providing access to the server if the total number of previous clients having 
access to the server is less than a client limit; 

providing access to the server if the total number of previous clients is 
greater than or equal to the client limit and if the current client has previously been 
allowed to access the server; 

storing the unique client identifier associated with the current client in 
memory if access is provided to the current client; 

Th e m e thod as r e cit e d in claim 7, furth e r comprising: 

pre-configuring the client limit; 

encrypting the client limit; and 
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storing the encrypted client limit in memory. 


1 5 . (Currently amended) A method, comprising: 

detecting when a current client attempts to establish a connection with a 

server; 

determining a unique client identifier that is associated with the current 

client; 

determining if a total number of previous clients having access to the server 
is less than a client limit; 

determining if the current client has previously been allowed to access the 

server; 

providing access to the server if the total number of previous clients having 
access to the server is less than a client limit; 

providing access to the server if the total number of previous clients is 
greater than or equal to the client limit and if the current client has previously been 
allowed to access the server; 

storing the unique client identifier associated with the current client in 
memory if access is provided to the current client; 

Th e method as r e cit e d in claim 7, furth e r comprising: 

retrieving an encrypted client limit; and 

decrypting the encrypted client limit to derive the client limit. 

16. (Currently amended) The method as recited in claim !5[[7]], 
wherein the determining the unique client identifier that is associated with the 
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current client further comprises identifying an Internet protocol address from a 
data packet transmitted by the current client. 

17. (Currently amended) The method as recited in claim j_5 [[7]], 
further comprising storing the unique client identifiers in a client table in memory. 

18. (Currently amended) The method as recited in claim J_5[[7]] 5 
wherein the client identifier is a network address. 

Claims 19-21. (Canceled) 

22. (Currently amended) A server that provides access to a limited 
number of clients, comprising: 
memory; 

a network interface configured to handle communications between the 
server and a plurality of clients; 

an operating system stored in the memory; 

a client limit stored in the memory, the client limit denoting a number of 
unique clients that are allowed to access the server; 

an IP stack in the memory that is used to process data packets transmitted 
from clients; 

a client table in the memory for storing a unique Network address for each 
client that accesses the server; 

a communications filter configured to: 
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allow access to a first client if the total number of clients that have 
accessed the server is less than the client limit, or if the total number of clients that 
have accessed the server is greater than or equal to the client limit and the first 
client has previously accessed the server; 

search the client table for a second Network address associated with 
the first client and determine that the first client has previously accessed the server 
if the second Network address is found in the client table; and 

The s e rv e r as r e cit e d in claim 21, wh e r e in th e communications filt e r is 
furth e r configur e d to determine the second Network address by signaling each 
Network address listed in the client table and determine that the second Network 
address is a network address listed in the table that does not acknowledge the 
signal. 

23. (Currently amended) The server as recited in claim 22[[19]], 
wherein the client limit is configurable. 

24. (Currently amended) The server as recited in claim 22[[19]], 
wherein the Communications filter is further configured to signal that the client 
limit has been exceeded and to deny server access to the first client if the total 
number of clients that have accessed the server is greater than or equal to the client 
limit, and the first client has not previously accessed the server. 

25. (Currently amended) A server that provides access to a limited 
number of clients, comprising: 

memory; 
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a network interface configured to handle communications between the 
server and a plurality of clients; 

an operating system stored in the memory; 

a client limit stored in the memory, the client limit denoting a number of 
unique clients that are allowed to access the server; 

an IP stack in the memory that is used to process data packets transmitted 
from clients; 

a client table in the memory for storing a unique Network address for each 
client that accesses the server; and 

a communications filter configured to allow access to a first client if the 
total number of clients that have accessed the server is less than the client limit, or 
if the total number of clients that have accessed the server is greater than or equal 
to the client limit and the first client has previously accessed the server; 

Th e s e rv e r as r e cit e d in claim 19, wherein the client limit is encrypted, the 
server further comprising a decryption module configured to decrypt the encrypted 
client limit. 

Claims 26-28. (Canceled) 

29. (Currently amended) A method for providing server access to 
a limited number of clients, the method comprising: 

monitoring TCP/IP packets sent from a plurality of clients to a server; 

obtaining a unique Network address for each client from one or more 
packets transmitted by the client; 

storing the Network address of each client that accesses the server; 
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determining if a client limit has been reached; and 

providing access to a first client upon determining if the client limit has 
been reached, or upon determining if the first client has previously accessed the 
server; 

Th e m e thod as recit e d in claim 26, wherein the determining if the first 
client has previously accessed the server further comprises: 

sending a signal to each of multiple Network addresses of clients 
that have accessed the server; and 

if there is no response to one of the signals, determining that the first 
client has previously accessed the server using the Network address of the client 
from which there was no response detected. 

30. (Currently amended) A method for providing server access to 
a limited number of clients, the method comprising: 

monitoring TCP/IP packets sent from a plurality of clients to a server; 

obtaining a unique Network address for each client from one or more 
packets transmitted by the client; 

storing the Network address of each client that accesses the server; 

determining if a client limit has been reached; 

providing access to a first client upon determining if the client limit has 
been reached, or upon determining if the first client has previously accessed the 
server; 

Th e m e thod as r e cit e d in claim 26, furth e r comprising: 

retrieving an encrypted client limit; and 

decrypting the encrypted client limit to derive the client limit. 
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Claims 31-33. (Canceled) 


34. (Currently amended) An operating system stored on a 
computer-readable medium, the operating system comprising: 

an IP stack for processing Internet protocol data packets received from 
multiple clients; 

a client limit field containing a client limit value that denotes a maximum 
number of clients that may access the IP stack; 

a client table containing a unique Network address for each client that has 
accessed the operating system; and 

a communications filter configured to: 

determine a first Network address of a first client attempting to 
access the operating system, search the client table for the first Network address, 
and allow the first client to access the operating system if the first Network 
address is found in the client table; 

allow the first client to access the operating system if the number of 
Network addresses in the client table is greater than or equal to the client limit 
value and the first client has previously accessed the operating system using a 
second Network address that is stored in the client table; 

Th e op e rating syst e m as r e cit e d in claim 33 , wh e r e in th e communications 
filt e r is furth e r configur e d to: 

transmit a signal to each Network address listed in the client table; 
monitor for an acknowledgement to each signal; and 
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if an acknowledgement is not received from a network address in the 
client table, determining that the non-acknowledging Network address is the 
second Network address used by the first client. 

35. (Original) The operating system as recited in claim 34, wherein 
the Communications filter is further configured to replace the second Network 
address in the client table with the first Network address. 

36. (Currently amended) An operating system stored on a 
computer-readable medium, the operating system comprising: 

an IP stack for processing Internet protocol data packets received from 
multiple clients; 

a client limit field containing a client limit value that denotes a maximum 
number of clients that may access the IP stack; 

a client table containing a unique Network address for each client that has 
accessed the operating system; and 

a communications filter configured to determine a first Network address of 
a first client attempting to access the operating system, search the client table for 
the first Network address, and allow the first client to access the operating system 
if the first Network address is found in the client table; 

Th e operating syst e m as r e cit e d in claim 3 1 , wherein the client limit value 
is encrypted, and the operating system further comprises a decryption module that 
is configured to decrypt the client limit value. 

Claims 37-38. (Canceled) 
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39. (Currently amended) 


A 


computer-readable 


medium 


comprising computer-executable instructions that, when executed on a computer, 
perform the following steps: 

determining a first Internet Protocol (IP) address transmitted from a first 
client to a server; 

searching a client table for the first Network address; 

allowing the first client to access the server if the first Network address is 
found in the client table; 

Th e comput e r r e adabl e m e dium as r e cit e d in claim 37, furth e r comprising 
comput e r e x e cutabl e instructions that, wh e n e x e cut e d on a comput e r, p e rform th e 
following st e ps: 

transmitting a signal to each Network address listed in the client table; and 
if there is no response from one of the Network addresses signaled, 
allowing the first client to access the server, removing the non-responsive Network 
address from the client table, and inserting the first Network address into the client 
table. 


Claims 40-42. 


(Canceled) 


43 . (Currently amended) 


A computer system, comprising: 


a processor; 


a network interface card to handle communications with multiple clients; 


memory; 


a global system registry; 
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a client table having one entry for each client allowed to access the system, 
each entry including a unique Internet protocol (IP) address for each client; and 
a communications filter configured to: 

retrieve a client limit from the global system registry; 
determine a first Network address that is associated with a first client 
attempting to access the system; 

allow the first client to access the system if the first Network address 
is stored in the client table or if the number of client table entries is less than the 
client limit; 

store the first Network address in the client table if the first client is 
allowed to access the system; 

allow the first client to access the system if the number of entries in 
the client table is greater than or equal to the client limit and if the first client has 
previously accessed the system; and 

The comput e r syst e m as r e cit e d in claim 4 1 , wh e r e in th e Communications 
filt e r is furth e r configured to determine if the first client has previously accessed 
the system by transmitting a signal to each Network address listed in the client 
table, monitoring responses to the signals to determine if a client at a second 
Network address is no longer using the Network address, substituting the first 
Network address in the table for the second Network address and allowing the first 
client to access the system if the client at the second Network address does not 
respond to the signal. 

44. (Currently amended) A computer system, comprising: 
a processor; 
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a network interface card to handle communications with multiple clients; 
memory; 

a global system registry; 

a client table having one entry for each client allowed to access the system, 
each entry including a unique Internet protocol (IP) address for each client; and 
a communications filter configured to: 

retrieve a client limit from the global system registry; 
determine a first Network address that is associated with a first client 
attempting to access the system; 

allow the first client to access the system if the first Network address 
is stored in the client table or if the number of client table entries is less than the 
client limit; and 

store the first Network address in the client table if the first client is 
allowed to access the system; 

Th e comput e r syst e m as r e cit e d in claim 4 0, wherein the client limit is 
encrypted, the computer system further comprising a decryption module 
configured to decrypt the encrypted client limit. 

Claims 45-48. (Canceled) 

49. (Currently amended) A communications protocol filter, 
comprising processor-executable instructions that, when executed on a processor, 
perform the following steps: 

monitoring communications protocol data packets transmitted from one or 
more clients to a server; 
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obtaining a network address from a communications protocol data packet 
transmitted by a client; 

processing communications protocol data packets from the client if a 
Network address that is uniquely associated with the client is stored in a client 
table; 

Th e communications protocol filt e r as r e cit e d in claim 4 5, further 
comprising proc e ssor e xecutabl e instructions that, wh e n e x e cut e d on a processor, 
p e rform th e following st e ps: 

if the first Network address is not stored in the client table, retrieving a 
client limit value from a client limit field, the client limit value indicating a 
maximum number of unique clients for which communications protocol data 
packets can be processed; 

if the number of Network addresses in the client table is greater than or 
equal to the client limit value, transmitting a signal to each Network address listed 
in the client table; and 

if a client at a second Network addresses does not respond to the signal, 
removing the second Network address from the client table, inserting the first 
Network address into the client table and processing communications protocol 
data packets from the first client. 

50. (Original) The communications protocol filter as recited in claim 
49, further comprising processor-executable instructions that, when executed on a 
processor, perform the following steps: 

removing the second Network address from the client table; and 

inserting the first Network address into the client table. 
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51. (Currently amended) The communications protocol filter as 
recited in claim 49[[45]], wherein the communications protocol is an Internet 
protocol and the communications protocol data packets are Internet protocol data 
packets. 
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